This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/OtCGjso3OIWCT91z-dIAYXRLgaE.roa File: OtCGjso3OIWCT91z-dIAYXRLgaE.roa (raw, json) Hash identifier: WzB/mkhNLhkBDDIyblbVxHLJteaxiC10uxzpbmBXXEA= Subject key identifier: 3A:D0:86:8E:CA:37:38:85:82:4F:DD:73:F9:D2:00:61:74:4B:81:A1 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D223161CABC85C7E14A62E5E9C75B Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/OtCGjso3OIWCT91z-dIAYXRLgaE.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200940 IP address blocks: 195.228.73.0/24 maxlen: 24 195.228.94.0/24 maxlen: 24 195.228.95.0/24 maxlen: 24 195.228.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:22:31:61:ca:bc:85:c7:e1:4a:62:e5:e9:c7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad0868eca373885824fdd73f9d20061744b81a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:fa:22:46:fb:cf:2d:79:ba:3e:e3:b0:cf: 00:08:eb:4e:42:1d:bc:58:ec:cb:05:ab:cd:f6:64: 50:d5:b8:0c:f9:ea:56:a5:3f:14:62:2f:07:69:54: d5:01:0a:53:5a:55:62:b7:32:1d:02:ee:48:7d:07: 09:1f:47:c0:76:13:6e:ab:dd:69:c9:30:f0:10:83: be:dd:24:e9:b5:01:62:8f:83:b0:d2:0a:7a:1f:e2: 05:d4:78:4b:1b:05:79:ae:b7:30:e6:17:f9:87:da: d4:a0:e4:9c:d2:b4:40:c5:8e:7b:d5:06:18:f8:94: 49:a3:e0:2c:dc:95:7a:8d:d1:4a:7c:61:9a:39:3b: 71:8a:63:07:8f:48:79:75:be:68:ed:f9:0c:02:93: 9f:57:60:68:e2:a4:14:d4:66:fd:0b:42:83:1e:0b: d8:72:42:73:69:25:7b:d9:85:62:24:16:2d:d4:ee: 51:76:b3:95:03:2f:c1:c0:7a:b4:60:6a:37:ba:01: cf:3f:1e:dc:9d:cb:70:cb:41:ce:bb:0c:f6:a0:d7: 83:5f:46:0f:1a:24:40:91:40:d4:e1:ac:98:22:e0: 78:28:0b:ce:30:33:b9:66:e8:b6:1d:22:9e:b1:25: a3:65:e8:7c:f7:2c:b0:0c:b2:61:d7:ca:d2:9e:35: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D0:86:8E:CA:37:38:85:82:4F:DD:73:F9:D2:00:61:74:4B:81:A1 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/OtCGjso3OIWCT91z-dIAYXRLgaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.228.73.0/24 195.228.94.0/23 195.228.103.0/24 Signature Algorithm: sha256WithRSAEncryption 40:5b:52:d0:60:0b:4a:e2:20:26:f6:66:5b:ce:dd:b8:89:5d: ca:ae:2f:5e:02:36:21:eb:45:ff:a8:bf:ea:f4:75:1f:05:6a: a9:8e:31:e9:5c:34:8b:9c:1b:36:d2:0b:80:b7:1e:5b:0e:a5: 8c:09:27:42:77:7f:91:0f:d3:9a:f6:25:4c:74:ab:ed:15:87: 63:94:c2:2e:c6:7e:4c:23:1c:74:3f:2c:34:63:ed:4d:19:c4: 5e:cf:90:25:08:a7:df:fa:77:06:b4:e2:ca:df:4c:98:19:f5: 0c:4f:9e:99:23:fe:b6:f8:96:20:b8:e1:6a:09:79:d5:56:03: 73:ac:02:95:30:7c:2b:56:81:07:fe:3a:14:b9:fb:7b:94:64: 40:32:bc:00:d1:30:e9:1c:16:a3:e7:36:bf:6a:c6:cd:53:38: cf:e7:89:76:37:86:3c:96:bc:e1:0f:d9:b8:aa:1d:43:74:3c: 33:ed:8e:55:4d:3e:c3:76:27:22:7a:ba:d8:b9:ff:43:2b:11: 23:06:71:dc:73:e3:3a:e2:a7:cc:0f:af:ac:e3:66:17:91:1f: 5e:f6:e5:d0:0d:db:64:85:e8:88:30:7c:cc:2e:aa:ca:a3:59: 20:b2:6e:36:af:82:91:9e:8d:ad:11:0f:2b:26:9c:ea:78:21: 8b:d4:71:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XSIxYcq8hcfhSmLl6cdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQwODY4ZWNhMzczODg1ODI0ZmRkNzNmOWQyMDA2MTc0NGI4MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYb6Ikb7zy15uj7jsM8ACOtOQh28 WOzLBavN9mRQ1bgM+epWpT8UYi8HaVTVAQpTWlVitzIdAu5IfQcJH0fAdhNuq91p yTDwEIO+3STptQFij4Ow0gp6H+IF1HhLGwV5rrcw5hf5h9rUoOSc0rRAxY571QYY +JRJo+As3JV6jdFKfGGaOTtximMHj0h5db5o7fkMApOfV2Bo4qQU1Gb9C0KDHgvY ckJzaSV72YViJBYt1O5RdrOVAy/BwHq0YGo3ugHPPx7cnctwy0HOuwz2oNeDX0YP GiRAkUDU4ayYIuB4KAvOMDO5Zui2HSKesSWjZeh89yywDLJh18rSnjW2twIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDrQho7KNziFgk/dc/nSAGF0S4GhMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvT3RDR2pzbzNPSVdDVDkxei1kSUFZWFJMZ2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw+RJAwQB w+ReAwQAw+RnMA0GCSqGSIb3DQEBCwUAA4IBAQBAW1LQYAtK4iAm9mZbzt24iV3K ri9eAjYh60X/qL/q9HUfBWqpjjHpXDSLnBs20guAtx5bDqWMCSdCd3+RD9Oa9iVM dKvtFYdjlMIuxn5MIxx0Pyw0Y+1NGcRez5AlCKff+ncGtOLK30yYGfUMT56ZI/62 +JYguOFqCXnVVgNzrAKVMHwrVoEH/joUuft7lGRAMrwA0TDpHBaj5za/asbNUzjP 54l2N4Y8lrzhD9m4qh1DdDwz7Y5VTT7DdicierrYuf9DKxEjBnHcc+M64qfMD6+s 42YXkR9e9uXQDdtkheiIMHzMLqrKo1kgsm42r4KRno2tEQ8rJpzqeCGL1HGw -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:12 2026 by rpki-client